Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
File:                     MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft (raw, json)
Hash identifier:          rHQtSPqCmxWp4R/P/SiPrcGDZ/2CORVMOygTKwFPMuA=
Subject key identifier:   64:7F:F4:D4:32:B8:9E:36:43:C9:D3:EA:AE:A7:50:22:61:85:CF:3C
Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Certificate issuer:       /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
Manifest number:          7D
Signing time:             Tue 12 May 2026 23:31:42 +0000
Manifest this update:     Tue 12 May 2026 23:31:41 +0000
Manifest next update:     Tue 19 May 2026 23:31:41 +0000
Files and hashes:         1: MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl (hash: yNHcnzu+j4ms4ePjoOjcBOS9MK8NlHkSyEpBuaDHQ+8=)
                          2: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (hash: OAI+YN11U1PZfLdiNPQNMB7UXRmGheB6bQN72SIA05g=)
                          3: 48DA881CA5FF11F08004B67CC4F9AE02.roa (hash: vLVmclqSWSw9c6sWEF49QFNtj33DBN50eIGMmcN8s88=)
                          4: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (hash: dWHrgDdQ9oxBHH3ChoJxtFZzUQfQ+vX9Kd8hcoNAwZY=)
                          5: 4988E222A5FF11F08004B67CC4F9AE02.roa (hash: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw=)
                          6: 485C422CA5FF11F08004B67CC4F9AE02.roa (hash: ES3xbmOIjTGPeT8IfY1TCtnhdjiNJx4hr7CiNHyRg0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
        Validity
            Not Before: May 12 23:31:41 2026 GMT
            Not After : May 19 23:31:41 2026 GMT
        Subject: CN=6a03b85e-91e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:21:8c:69:3d:6c:44:b5:7f:45:0b:af:40:
                    f9:73:b1:8f:57:89:ee:83:ef:5f:87:39:c3:42:bb:
                    95:87:fe:95:51:5a:87:b2:da:57:60:2f:69:48:16:
                    9a:20:c7:e8:c1:3e:1b:d2:0a:f9:fa:5f:3a:08:06:
                    39:03:bb:f3:cb:76:3a:b6:d7:26:c3:5d:d1:6a:d7:
                    51:78:fd:ba:35:94:7f:fd:e6:14:df:12:91:ce:e7:
                    ea:b9:91:2b:61:38:8e:22:dd:3a:f2:fe:5d:46:04:
                    53:71:94:9d:bc:e4:b8:31:f1:a5:df:10:25:ae:d0:
                    1a:36:69:1e:4d:ac:56:2a:fa:da:45:5c:fa:ce:d7:
                    df:82:ed:96:37:50:a6:09:97:52:99:41:df:ef:98:
                    0b:12:54:42:ca:74:fb:17:c1:c1:b1:dd:74:0b:d0:
                    91:d0:14:41:5f:61:bc:cd:ab:65:d4:cb:85:93:4a:
                    e7:7f:fe:ec:5f:b0:5b:0a:3e:dc:2b:8e:32:72:07:
                    fb:c2:e5:1e:bc:5c:f3:5b:03:99:d0:71:4a:d3:cc:
                    79:c5:a6:76:33:55:b4:44:7a:34:3a:94:41:e4:3a:
                    cc:aa:b6:ac:f3:23:a8:78:df:f5:30:98:82:01:9a:
                    3d:ba:6c:f1:4c:30:cf:66:97:95:ea:4a:9e:01:85:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7F:F4:D4:32:B8:9E:36:43:C9:D3:EA:AE:A7:50:22:61:85:CF:3C
            X509v3 Authority Key Identifier:
                keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:86:63:9b:af:38:4a:13:24:5d:bc:97:15:e5:f7:83:13:9b:
         86:f5:67:41:04:3a:9b:bf:11:20:b5:00:8a:02:20:a7:a9:39:
         cc:7a:4d:4e:77:5a:04:1f:9f:21:1f:62:ab:78:99:3b:1d:ef:
         8a:50:c8:89:39:94:ce:f8:d5:73:da:c7:0d:50:1d:be:a2:e4:
         12:af:f4:37:7b:5c:66:cc:44:40:29:83:b1:e1:ce:bd:16:63:
         ad:33:b0:a8:74:e3:42:88:0d:43:b1:79:86:e4:c7:36:31:7c:
         c9:cf:7e:1b:48:61:73:92:0a:08:4b:a2:e3:0b:52:1c:f6:2a:
         8c:23:ed:57:de:1e:9f:50:0e:78:d9:45:39:34:4e:40:24:e0:
         93:57:40:95:a1:95:6f:dd:04:af:3e:a4:3c:69:ad:ab:c1:12:
         ba:58:66:76:cb:0e:d3:47:ae:20:c8:c9:69:3b:2f:69:61:37:
         de:29:89:1b:1b:d0:df:f9:f0:d9:a8:ef:54:ff:62:4e:e3:76:
         01:62:2e:fc:11:8b:8f:11:90:ec:13:5e:b8:0f:d2:83:d7:f8:
         0f:b7:20:58:5b:17:53:3c:6a:7f:93:1d:4f:06:be:5e:1d:bf:
         a6:e9:db:2d:26:b6:6e:fe:09:bb:ba:3b:b4:04:b5:b3:fe:56:
         3e:d5:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:02:14 2026 by rpki-client